CWE-264: Permissions, Privileges, and Access Controls
Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.
From the CWE List. © The MITRE Corporation.
Newest
- intel webadvisor, mcafee security webadvisor, cloud av +1 more +3 moreMalicious file execution vulnerability in Intel Security WebAdvisor before 4.0.2, 4.0.1 and 3.7.2...7.0 High
- intel mcafee security scan+ (mss+), mcafee cloud av, security scan plus +1 more +3 moreMalicious file execution vulnerability in Intel Security McAfee Security Scan+ (MSS+) before 3.11...7.0 High
- intel cloud analysis and deconstructive services (cads), mcafee cloud analysis and deconstructive services +1 moreInformation disclosure vulnerability in McAfee (now Intel Security) Cloud Analysis and...9.8 Critical
- google android, linux kernel +1 moreAn elevation of privilege vulnerability in the Qualcomm GPU driver could enable a local malicious...7.8 High
- google android, linux kernel +1 moreAn elevation of privilege vulnerability in the Qualcomm camera driver could enable a local...7.0 High
- linux kernel, google android +1 moreRace condition in the L2TPv3 IP Encapsulation feature in the Linux kernel before 4.8.14 allows...7.0 High
- phpAn issue was discovered in PHP 5.x and 7.x, when the configuration uses apache2handler/mod_php or...7.5 High
- netapp data ontapNetApp Data ONTAP 9.0 and 9.1 before 9.1P1 allows remote authenticated users that own SMB-hosted...8.8 High
- ploneChameleon in Plone allows Authentication Bypass4.9 Medium
- plonePlone vulnerable to privilege escalation in WebDAV7.3 High
- ibm websphere mqIBM WebSphere MQ 8.0 could allow an authenticated user with authority to create a cluster object...3.1 Low
- trendmicro interscan web security virtual appliancePrivilege Escalation Vulnerability in com.trend.iwss.gui.servlet.updateaccountadministration in...8.8 High
- trendmicro interscan web security virtual applianceRemote Command Execution in com.trend.iwss.gui.servlet.ManagePatches in Trend Micro Interscan Web...9.9 Critical
- apple iphone os, mac os x +1 moreAn issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10...7.8 High
- apple watchos, iphone os, mac os x +2 moreAn issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10...7.8 High
- apple mac os xAn issue was discovered in certain Apple products. macOS before 10.12.2 is affected. The issue...5.5 Medium
- apple watchos, iphone os, mac os x +1 more +3 moreAn issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10...7.8 High
- apple icloudAn issue was discovered in certain Apple products. iCloud before 6.0.1 is affected. The issue...7.8 High
- apple mac os xAn issue was discovered in certain Apple products. macOS before 10.12 is affected. The issue...8.8 High
- apple iphone osAn issue was discovered in certain Apple products. iOS before 10.1 is affected. The issue...4.4 Medium
- apple tvos, watchos, iphone os +1 more +3 moreAn issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10...7.8 High
- apple mac os xAn issue was discovered in certain Apple products. macOS before 10.12 is affected. The issue...8.8 High
- cisco unified computing system directorA vulnerability in the web-based GUI of Cisco UCS Director 6.0.0.0 and 6.0.0.1 could allow an...8.8 High
- ibm aix, vios +1 moreIBM AIX 6.1, 7.1, and 7.2 could allow a local user to gain root privileges using a specially...7.8 High
- ibm aix, vios +1 moreIBM AIX 5.3, 6.1, 7.1, and 7.2 contains an unspecified vulnerability that would allow a locally...7.8 High
- freebsdThe issetugid system call in the Linux compatibility layer in FreeBSD 9.3, 10.1, and 10.2 allows...7.8 High
- freebsdThe kernel in FreeBSD 9.3, 10.1, and 10.2 allows local users to cause a denial of service (crash)...7.8 High
- freebsdThe Linux compatibility layer in the kernel in FreeBSD 9.3, 10.1, and 10.2 allows local users to...7.8 High
- nagiosNagios 4.3.2 and earlier allows local users to gain root privileges via a hard link attack on the...7.8 High
- moxa nport, nport 5100 series firmware, nport 5100a series firmware +8 more +10 moreAn issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions...9.8 Critical
- advantech susiaccessAn issue was discovered in Advantech SUISAccess Server Version 3.0 and prior. The admin password...7.8 High
- emerson deltavAn issue was discovered in Emerson DeltaV Easy Security Management DeltaV V12.3, DeltaV V12.3.1,...6.8 Medium
- moxa awk-1121 firmware, awk-1127 firmware, awk-1131a firmware +11 more +13 moreAn issue was discovered in Moxa OnCell OnCellG3470A-LTE, AWK-1131A/3131A/4131A Series, AWK-3191...10.0 Critical
- lynxspring jenesys bas bridgeAn issue was discovered in Lynxspring JENEsys BAS Bridge versions 1.1.8 and older. A user with...7.1 High
- osisoft pi web api 2015 r2An issue was discovered in OSIsoft PI Web API 2015 R2 (Version 1.5.1). There is a weakness in...6.4 Medium
- bubblewrap project bubblewrapBubblewrap before 0.1.3 sets the PR_SET_DUMPABLE flag, which might allow local users to gain...7.0 High
- calibre-ebook calibreThe E-book viewer in calibre before 2.75 allows remote attackers to read arbitrary files via a...5.5 Medium
- cisco anyconnect secure mobility clientA vulnerability in the Start Before Logon (SBL) module of Cisco AnyConnect Secure Mobility Client...7.8 High
- fortinet connectInsufficient verification of uploaded files allows attackers with webui administrators privileges...7.2 High
- ibm tivoli storage manager fastbackIBM Tivoli Storage Manager FastBack installer could allow a remote attacker to execute arbitrary...7.3 High
- google android, linux kernel +1 moreAn elevation of privilege vulnerability in the Qualcomm sound driver could enable a local...7.0 High
- google android, linux kernel +1 moreAn elevation of privilege vulnerability in the Qualcomm Secure Execution Environment Communicator...7.0 High
- google android, linux kernel +1 moreAn elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local...7.0 High
- google android, linux kernel +1 moreAn elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local...7.0 High
- google android, linux kernel +1 moreAn elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local...7.0 High
- google android, linux kernel +1 moreAn elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local...7.0 High
- kernel util-linuxrunuser in util-linux allows local users to escape to the parent session via a crafted TIOCSTI...7.8 High
- linux kernel, google android +1 moreThe aio_mount function in fs/aio.c in the Linux kernel before 4.7.7 does not properly restrict...7.8 High
- dnnsoftware dotnetnukeThe installation wizard in DotNetNuke (DNN) allows privilege escalation9.8 Critical
- emc isilon onefsEMC Isilon OneFS 7.2.1.0 - 7.2.1.3, EMC Isilon OneFS 7.2.0.x, EMC Isilon OneFS 7.1.1.0 - 7.1.1.10...7.2 High
- Show moreLoading…